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(§) Zentralgesteuerte Umschalteeinrichtung 

Die Erfindung betrifft eine zentralgesteuerte Umschalte- 
einrichtung mit einer Vielzahl von mittels Relais geschalte- 
ten galvanischen Umschaltekoppelpunkten (KP) 2um Um- 
schalten von Leitungen und Geraten in Femmeldevermitt- 
lungsanlagen. Zur Neueinstellung ausgetauschter Umschal- 
tebaugruppen durch das zentrale Steuerwerk (St) ist dieses 
mit einem Speicher (Sp) gekoppelt. in dem jeweils die letz- 
ten, der Umschalteeinrichtung eingegebenen, Umschalte- 
befehle pro Umschaltekoppelpunkt (KP) gespeichert sind. 
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Patentanspruche 

(2/) Zentralgesteuerte Umschalteeinrichtung rait einer Viel- 
zahl von mittels Relais geschalteten galvanischen Um- 
5 schaltekoppelpunkten zum Umschalten von Leitungen und 
Geraten in Fernmeldevermittlungsanlagen, d a d u r c h 
gekennzeichnet , daQ mit deia zentralen 
Steuerwerk (St) ein Speicher (Sp) gekoppelt ist, in dem 
jeweils die letzten Umschalteeinrichtung eingegebenen 
10 Uisschaltebef ehle pro Umschaltekoppelpunkt (KP) gespei- 
chert sind. 



2. Zentralgesteuerte Umschalteeinrichtung nach Anspruch 1, 
dadurch gekennzeichnet , daB sowohl 
15 die mittels eines Blattschreibers BS Oder einer Gesamt- 

umschaltetaste (GU) iiber die zentrale Steuerung (St) ein- • 
gegebenen als auch die am Umschaltekoppelpunkt (KP) manuell 
vorgenommenen Umschaltebef ehle gespeichert sind. 
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5 Zentralqesteuerte Umschalteeinrichtunq 



Die Erfindung betrifft eine zentralgesteuerte Umschalte- 
einrichtung mit einer Vielzahl von mittels Relais ge- 
schalteten galvanischen Omschaltekoppelpunkten 2um Urn- 
10 schalten von Leitungen in Geraten in Fernmeldevermitt- 
lungsanlagen . 

In bestimmten Anwendungsf alien kann das Ausfallen einer 
gesamten Anlage oder groSerer Teile eine Anlage zu einem 
15 nicht vertretbaren Sicherheitsrisiko fiihren, so z.B. in 

■ ■ 

der Flugsicherungstechnik, wo viele eingehende Informa- 

tionen bestimmten Adressen ubermittelt verden miissen. 

In derartigen Anwendungsf alien ist neben der eigentlichen 

■ ■ 

Betriebsanlag eine Notanlage vorgesehen, die die Aufga- 
20 ben der Betriebsanlage voll ubernehmen kann. Bei Ausfall 
einer gesamten Anlage bzw. Teile dieser Anlage sorgt dann 
eine Umschalteeinrichtung fiir die Umschaltung von der 
Betriebsanlage auf die Notanlage. Ebenso dienen Umschal- 
teeinrichtungen zur Umschaltung auf andere Leitungen 
25 bei Ausfall der regularen Leitungen. 

Derartige Umschalteeinrichtungen bestehen in der Regel aus 
mehreren Umschaltebaugruppen mit jeweils mehreren Umschal- 
tekoppelpunkten, wobei die einzelnen Umschaltebaugruppen 

30 als Einschiibe in Schranken zusammengef afit sind. Dabei kann 
das Problem auftreten, daQ aus betrieblichen Griinden ein- 
zelne Umschaltebaugruppen die als Einschiibe ausgebildet 
sind, ausgetauscht werden miissen. In derartigen Fallen 
ist das Wartungspersonal genotigt, sich die Stellung der 

35 einzelnen auf der Umschaltebaugruppe befindlichen Umschal- 
Som 1 Bo / 24.9.1982 
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tekoppelpunkte zu merken und nach Einstecken einer neuen 
Umschaltebaugruppe diese Schaltstellungen wieder manuell 
neu einzustellen. 

5 Die Aufgabe der vorliegenden Erfindung besteht darin, eine 
zentralgesteuerte Umschalteeinrichtung anzugeben, bei der 
nach erneutem Stecken einer Umschaltebaugruppe diese von 
dem zentralen Steuerwerk entsprechend dem aktuellen Stand 
eingestellt wird. Diese Aufgabe wird fur eine zentralge- 

10 steuerte Umschalteeinrichtung der eingangs genannten Art 
dadurch gelost, dafi rait dem zentralen Steuervrerk ein Spei- 
cher gekoppelt ist, in dem jeweils die letzten der Umschal- 
teeinrichtung eingegebenen Umschaltebef ehle pro Uraschalte- 
koppelpunkt gespeichert sind» Dadurch hat die zentrale 

15 Steuerung jederzeit einen Zugriff zu Inf ormationen, denen 
die letzten Umschalteanf orderungen zu entnehmen sind. 
Nach Austauschen einer Umschaltebaugruppe durch eine neue 
kann von der zentralen Steuerung diese entsprechend den 
letzten Umschalteanf orderungen automatisch neu eingestellt 

20 werden, was eine erhebliche Erleichterung der Auswechsel- 
arbeit fur das Wartungspersonal bedeutet. 

Eine zweckmaBige Ausgestaltung der erfindungsgemaBen zen- 
tralgesteuerten Umschalteeinrichtung ist dadurch gekenn- 
25 zeichnet, daB sowohl die mittels eines Blattschreibers 
Oder einer Gesamtumschaltetaste iiber die zentrale Steue- 
rung eingegebenen als auch die am Umschaltekoppelpunkt 
manuell vorgenommenen Umschaltebef ehle gespeichert sind. 

30 Die Erfindung wird im folgenden anhand eines in einer Zeich 
nung dargestellten Ausf uhrungsbeispiels beschrieben* 



In der Zeichnung ist der prinzipielle Aufbau einer Umschal- 
teeinrichtung gemaS der vorliegenden Erfindung gezeigt, wel 
35 che z.B. eingehende L^itungen sowohl rait einer Betriebsan- 
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lage als auch mit einer Notanlage verbinden kann . 

In der Zeichnung ist eine Betriebsanlage Anl 1 und eine 
Notanlage Anl 2 dargestellt, die jeweils iiber eine Um- 
5 schalteeinrichtung UMS mit dem Leitungssystem L verbun- 
den werden konnen. Dabei wird davon ausgegangen, daB iiber 
das Leitungssystem L Inf ormationen einlaufen und Infor- 
mationen von der jeweils angeschalteten Anlage ausge- 
sendet werden. Von der llmschalteeinrichtung UMS ist unter 

10 anderem ein Umschaltekoppelpunkt KP dargestellt, be- 

stehend aus den FU-Kontakten uk1 bis uk4, wobei im dar- 
gestellten Beispiel angenommen ist, daB es sich bei dem 
Leitungssystem L urn eine 4-Draht-Leitung handelt. Weiter- 
hin ist eine der llmschalteeinrichtung UMS zugehorige 

15 Steuerung St dargestellt, die aufgrund ihr eingegebener 
Inf ormationen (Ausfall der Anlage Anl 1, priifen) iiber ein 
Datenbussystem D die einzelnen Umschaltekoppelpunkte 
aktiviert, d.h. z. B. die Umschaltekontakte uk1 bis uk4 
betatigt und damit die Notanlage an das Leitungssystem L. 

20 schaltet. 

Im dargestellten Ausf uhrungsbeispiel wurde von einer 
4-Draht-Leitung ausgegangen, denkbar ist aber auch ein 
andersartig aufgebautes Leitungssystem. Hinzu kommt, daB 

25 wie schon ausgefiihrt wurde, Umschalteeinrichtungen auch 
zum Umschalten von Leitungen eingesetzt werden. Hieraus 
ergibt sich, daB eine Omschalteeinrichtung moglichst 
universell eingesetzt werden soil, daB pro Umschalte- 
koppelpunkt ein oder mehrere Relais mit einer Anzahl von 

30 zu beschaltenen Kontakten eingesetzt werden, welche je 
nach Beschaltung universell einsetzbar sind und damit 
von ihrer Beschaltungsmbglichkeit her in den meisten 
Fallen uberdimensioniert sind. 

■ 

35 Weiterhin sind in der Zeichnung dargestellt ein Blatt- 
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schreiber BS, eine Gesamtumschaltetaste GU und ein Spei- 
cher Sp, welche mit der zentralen Steuerung St verbun- 
den sind. liber den Blattschreiber BS konnen der Umschal- 
teeinrichtung bestimmte Umschaltebef ehle eingegeben wer- 
5 den, wahrend uber die Gesamtumschaltetaste GU der Umschal- 
teeinrichtung der Befehl zu einer Gesamtumschaltung ge- 
geben wird. Derartige eingegebene Befehle werden im Spei- 
cher Sp abgespeichert • Auf diese tfeise hat die zentrale 
Steuerung jederzeit einen Zugriff auf aktuelle Umschalte- 

10 inf ormationen . Nicht dargestellt ist in der Zeichnung 

die Moglichkeit, einen einzelnen Koppelpunkt, z.B. KP, von 
Hand umzuschalten. Auch bei manueller Umschaltung eines 
einzelnen Koppelpunktes wird diese neue Umschalteinf or- 
mation uber das Datenbussystem D und der zentralen Steue- 

15 rung St an den Speicher Sp weitergegeben . 

Auf diese Weise ist es moglich durch Riickgriff auf den 
jeweils aktuellen Umschalteinf ormationsstand nach Ziehen 
und Stecken einer neuen Umschaltebaugruppe diese von der 
20 zentralen Steuerung St, entsprechend dem letzten Infor- 
mationsstand, neu einzustellen. 

2 Patentanspruche 
1 Figur 
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(57) ABSTRACT 

A system and method for rapidly switching between redun- 
dant networks comprises a primary network controller, a 
plurality of network devices connected to the primary net- 
work controller by a respective primary network path, and at 
least one predetermined backup network path. When the 
primary network path is active, the network controller 
blocks the predetermined backup network paths. However, 
when the primary network path fails, the primary network 
conUoller blocks the failed primary network path and 
switches to one of the predetermined backup network paths. 
Because the backup network paths are determined in 
advance of a primary network path failure, the primary 
network controller can immediately switch to one of the 
predetermined backup network paths rather than having to 
recalculate an alternative network path after the primary 
network path has failed. 
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A system and method for rapidly switching between redun- 
dant networks comprises a primary network controller, a 
plurality of network devices connected to the primary net- 
work controller by a respective primary network path, and at 
least one predetermined backup network path. When the 
primary network path is active, the network controller 
blocks the predetermined backup network paths. However, 
when the primary network path fails, the primary network 
controller blocks the failed primary network path and 
switches to one of the predetermined backup network paths. 
Because the backup network paths are determined in 
advance of a primary network path failure, the primary 
network controller can immediately switch to one of the 
predetermined backup network paths rather than having to 
recalculate an alternative network path after the primary 
network path has failed. 
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SYSTEM AND METHOD FOR RAPIDLY 
SWITCHING BETWEEN REDUNDANT 
NETWORKS 

BACKGROUND OF THE INVENTION 

[0001] This invention relates to network systems and, 
more particularly, to a system and method for rapidly 
switching between redundant networks. 

[0002] Networks may be expanded by using one or more 
repeaters, bridges, switches or similar types of devices. A 
repeater is a device that moves all packets from one network 
segment to another by regenerating, re -timing, and ampli- 
fying the electrical signals. Abridge is a device that operates 
at the Data-Link Layer of the OSI (Open Systems Intercon- 
nection) Reference Model, passes packets from one network 
to another, and increases efficiency by filtering packets to 
reduce the amounts of unnecessary packet propagation on 
each network segment. A switch is similar in function to a 
multiple port bridge, but includes a plurality of ports for 
directing network traffic among several similar networks. A 
repeater or a switch may also include a second set of ports 
for coupling to higher speed network devices, such as one or 
more uplink ports. 

[0003] Expansion of a network often results in loops that 
cause undesired duplication and transmission of network 
packets such as broadcast storms, as well as address conflict 
problems. A standard spanning tree procedure has been 
defined for network bridging devices, such a bridges, rout- 
ers, and switches, to enable the bridging devices of a 
network to dynamically discover a subset of any topology 
that forms a loop-free or "spanning" tree. A spanning tree 
procedure by the American National Standards Institute and 
the Institute of Electrical and Electronics Engineers, Inc. is 
published in a specification known as the ANSI/IEEE Std. 
802. ID. 

[0004] The spanning tree procedure results in a network 
path between any two devices in the network system, which 
is updated dynamically in response to modifications of the 
network system. Each bridging device transmits configura- 
tion messages, which are use by other bridging devices in 
the network to determine the spanning tree. 

[0005] One problem with spanning tree procedures is the 
amount of time it takes to reconfigure the spanning tree 
topology if there is a bridge or a data-path failure. Whenever 
there is a bridge or data-path failure, the spanning tree 
algorithm must be executed to determine an alternative 
network path. Depending upon the size of the network, the 
spanning tree calculations could take as long as two minutes 
to complete. This delay in reconfiguring the network is 
unacceptable in networks that support certain mission-criti- 
cal applications, such as control and data acquisition system 
for electrical power grids. 

BRIEF SUMMARY OF THE INVENTION 

[0006] In an exemplary embodiment of the invention, a 
network comprises a primary network controller, a plurality 
of network devices connected to the primary network con- 
troller by a respective primary network path, and at least one 
predetermined backup network path. When the primary 
network path is active, the network controller blocks the 
predetermined backup network paths. However, when the 



primary network path fails, the primary network controller 
blocks the failed primary network path and switches to one 
of the predetermined backup network paths. 

[0007] Because the backup network paths are determined 
in advance of a primary network path failure, the primary 
network controller can immediately switch to one of the 
predetermined backup network paths rather than having to 
recalculate an alternative network path after the primary 
network path has failed. 

[0008] The invention also provides a control and data 
acquisition system, comprising at least one network control- 
ler, a plurality of data terminal equipment (DTE) devices, 
respective primary network paths connecting each DTE 
device with the at least one network controller, and prede- 
termined backup network paths connecting each DTE device 
with the at least one network controller. Each predetermined 
backup network path is blocked by the at least one network 
controller when a corresponding primary network path is 
active. However, when a primary network path fails, the at 
least one network controller blocks the failed primary net- 
work path and switches to one of the predetermined backup 
paths. 

[0009] The invention also provides a method of imple- 
menting a network, comprising the steps of determining a 
primary network path between a network controller and a 
network devices determining, prior to a failure of the pri- 
mary network path, a backup network path between the 
network controller and the network device, monitoring the 
status of the primary network path, blocking the backup 
network path while the primary network path is active, and 
blocking the primary network path and making the backup 
network path active when the primary network path fails. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] FIG. 1 is a block diagram of a network in accor- 
dance with one embodiment of the present invention; 

[0011] FIG. 2 is a block diagram of a control and data 
acquisition system, in accordance with one embodiment of 
the present invention; 

[0012] FIG. 3 is a flowchart of a preferred control routine 
for the network controllers shown in FIGS. 1 and 2 and 

[0013] FIG. 4 is a flowchart of a preferred control routine 
for testing backup network paths. 

DETAILED DESCRIPTION OF THE 
INVENTION 

[0014] FIG. 1 shows a network 100, in accordance with 
one embodiment of the present invention. The network 100 
includes a network controller 110, bridging devices 120a 
and 1206, and network devices 130a, 1306 and 130c. 

[0015] Only two bridging devices 120a and 1206 and 
three network devices 130a, 1306 and 130c are shown for 
purposes of illustration. It should be appreciated that larger 
networks incorporating any combination of bridging devices 
and network devices can be used while still failing within the 
scope of the present invention. 

[0016] Bridging devices 120a and 1206 refer to any type 
of bridging or switching device, such as bridges, switches, 
repeater, routers, brouters, etc. Network devices, 130a, 1306 
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and 130c axe preferably any type of Data Terminal Equip- 
ment (DTE) device. A DTE device refers to any source of or 
destination for data. Examples of DTE devices include 
universal relays, process control equipment, and computer 
systems. The network devices 130a-130c preferably contain 
at least two data ports, which are shown in FIG. 1 as the 
letters "A" and "B" next to each network device. 

[0017] The network controller 110 preferably executes 
routines for communicating with network devices 130a- 
130c, and for determining which network path is used to 
communicate with the network devices 130a-130c. 

[0018] For purposes of illustrating and describing the 
various network paths in the network 100 the network 
controller U0 will also be referred to as NC the bridging 
devices 120a and 1206 will also be referred to as SI and S2 
respectively, and the network devices 130a, 1306 and 130c 
will also be referred to as Dl, D2 and D3, respectively. 
Further, the primary network paths are indicated with solid 
lines, the backup network paths are indicated with dashed 
lines and paths that are used both as a primary and a backup 
path are indicated by dotted lines. 

[0019] In operation, the network controller 110 establishes 
primary network paths to the network devices 130a-130c. In 
the example shown, the primary network path between the 
network controller 110 and network device 130a is NC-S1- 
D1A. The terminology "D1A" refers to port "A" in network 
device Dl (130a). 

[0020] In the example shown, the primary network paths 
between the network controller 110 and network devices 
1306 and 130c are NC-S1-D2A, and NC-S1-D3A, respec- 
tively. As long as connection NC-S1 is operational, the 
network controller 110 will block corresponding predeter- 
mined backup paths NC-S2-S1-D1A, NC-S2-S1-D2A and 
NC-S2-Sl-D3Aby blocking the connection between SI and 
S2. These backup network paths are predetermined, in that 
they are calculated and stored in the network controller 110 
before the failure of any of the primary network paths. By 
blocking the S1-S2 connection, loops between the network 
controller 110 and the bridging devices 120a and 1206 are 
avoided. 

[0021] If the NC-S1 connections fails, the network con- 
troller will enable the S1-S2 connection, thereby enabling 
the predetermined backup network paths NC-S2-S1-D1A, 
NC-S2-Sl-D2Aand NC-S2-S1 -D3A. If the "A" data port on 
one of the network devices fails, the network device will 
preferably switch to the "B" data port, and another prede- 
termined backup network path will be enabled. For example, 
if data port "A" in network device 130a fails, the network 
device 130a will preferably switch to the "B" data port, and 
predetermined backup network path NC-S1-S2-D1B 
between the network controller 110 and network device 
130a will be enabled. 

[0022] As discussed above, any combination of bridging 
devices and network devices can be used while still falling 
within the scope of the present invention. In addition, one or 
more additional network controllers can be used as a backup 
to the network controller 110. If additional network control- 
lers are used, the additional network controllers will each 
have predetermined primary and backup network paths to 
the network devices 130a-130c, so mat one of the additional 
network controllers can take over control of the network 100 
if the primary network controller 110 fails. 



[0023] In a preferred embodiment, the network controller 
110 periodically tests the status of the backup network paths. 
This is preferably accomplished by disabling the primary 
network paths and querying the network devices 130a-130c 
via the backup network paths. The test procedure is prefer- 
ably done periodically to ensure that the backup network 
paths will be operational when a primary network path goes 
down. 

[0024] FIG. 2 illustrates a control and data acquisition 
system 200, in accordance with one embodiment of the 
present invention. The system 200 comprises a primary 
network controller 210a, a secondary network controller 
2106, bridging devices 220a-220A, and network devices 
230a-230c, 240a-240c and 250a-250c. 

[0025] Similar to the system of FIG. 1, the primary 
network controller 210a and a secondary network controller 
2106 will also be referred to as NCI and NC2, respectively, 
when discussing primary and backup network paths. In 
addition, bridging devices 220a-220f will also be referred to 
as S1-S6, and bridging devices 220g and 220A will also be 
referred to as Sn-1 and Sn. The terminology "Sn-l" and 
"Sn" is used to indicate that any number of bridging devices 
and associated network devices can be used while still 
falling within the scope of the present invention. 

[0026] Further, network devices 230a, 2306 and 230c will 
also be referred toasDll, D12 and Din, network devices 
240a, 2406 and 240c will also be referred to as D21, D22 
and D2n, and network devices 250a, 2506 and 250c will also 
be referred to as D31, D32 and D3n. The terminology 
"Din", "D2n" and "D3n" is used to indicate that any number 
of network devices can be connected to each bridging device 
while still falling within the scope of the present invention. 

[0027] Similar to the system of FIG. 1, solid lines indicate 
primary network paths, and dashed lines indicate backup 
network paths. Further, dotted lines indicate paths that are 
used both as a primary and a backup network paths. 

[0028] The primary network controller 210a and the sec- 
ondary network controller 2106 each preferably contain 
control routines for communicating with the various net- 
work devices 230a -250c and for determining which network 
path is used to communicate with the network devices 
230a«250c. The primary network controller 210a is prefer- 
ably the default network controller, and the secondary 
network controller 2106 is preferably used if the primary 
network controller 210a fails. 

[0029] The network devices 230a-250c care preferably 
data acquisition and control devices, such as universal relays 
and process control equipment. However, network devices 
230a-250c can be any DTE device. For illustration, network 
devices 230a-250c are each depicted as having two data 
ports ("A" and "B"). 

[0030] In operation, the primary network controller 210a 
and the secondary network controller 2106 each establish 
primary network paths and backup network paths to each of 
the various network devices 230a-250c. Examples of vari- 
ous failure modes are listed in the table below, along with the 
actions taken by the primary and secondary network con- 
trollers 210a and 2106. It should be appreciated that not all 
possible failure modes are listed, and that other primary/ 
backup network path configurations can be used while still 
falling within the scope of the present invention. 
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[0031] The sample failure modes listed in the table below 
are for communication failures between network controllers 
210a, 2106 and network device 230a. Further, it is assumed 
that the primary network paths between the primary network 
controller 210a and network device 230a is NC1-S1-S3- 
D1A, and the primary network path between the secondary 
network controller 210b and network device 230a is NC2- 
S2-S1-S3-D1A. 



Failure Mode 



Action 



(1) S1-S2 

Connection Fails 



(2) SI Fails 



(3) S1-S3 

Connection Fails 



(4) S3 Fails 



(5) S3-S4 

Connection Fails 



(1) If NCI in control: maintain primary network 
path NC1-S1-S3-D1A, and trigger alarm in 
human machine interlace. 

(2) If NC2 in control: switch to backup network 
path NC2-S2-S4-S3-D1A, and trigger alarm in 
human machine interface. 

(1) If NCI in control: disable node SI, switch to 
backup network path NC1-S2-S4-S3-D1A, and 
trigger alarm in human machine interface. 

(2) If NC2 in control: disable node SI, switch to 
backup network path NC2-S2-S4-S3-D1A, and 
trigger alarm in human machine interface. 

(1) If NCI in control: disable S1-S3 port in 
node SI, switch to backup network path 
NC1-S1-S2-S4-S3-D1A, and trigger alarm 
in human machine interface. 

(2) If NC2 in control: disable S1-S3 port in 
node SI, switch to backup network path 
NC2-S2-S4-S3-D1A, and trigger alarm 

in human machine interface. 

(1) If NCI in control: disable S1-S3 port in 
node SI, switch to backup network 

path NC1-S1-S2-S4-D1B, and 

trigger alarm in human machine interface. 

(2) If NC2 in control: disable S1-S3 port in 
node SI, switch to backup network 

path NC2-S2-S4-D1B, and trigger 
alarm in human machine interface. 

(1) If NCI in control: maintain primary network 
path NC1-S1-S3-D1A, and trigger alarm 

in human machine interface. 

(2) If NC2 in control: maintain primary 
network path NC2-S2-S1-S3-D1A, 
and trigger alarm in human 
machine interface. 

(1) If NCI in control: disable S3-D1A 
connection, switch to backup network path 
NC1-S1-S3-S4-D1B, and trigger 

alarm in human machine interface. 

(2) If NC2 in control: disable S3-D1A connection, 
switch to backup network path 
NC2-S2-Sl-S3-S4-DlB,and trigger 

alarm in human machine interface. 



[0032] The "human machine interface" is preferably a 
computer terminal that is used to input commands into and 
monitor the status of the primary and/or secondary network 
controllers 210a and 210b. 

[0033] The primary network controller 210a and the sec- 
ondary network controller 2106 preferably perform periodic 
tests of the backup network paths. In the system 200 of FIG. 
2 the even numbered nodes S2, S4, S6, Sn, etc., and the 
connections between them are used for the backup network 
paths, and are preferably checked periodically by the pri- 
mary network controller 210a and the secondary network 
controller 2106. 

[0034] Because the control and data acquisition system 
200 can switch to a backup network path that is already, 
determined, should a primary network path fail, there is little 



(6) Port A in Dl 
Fails 



or no down time associated with the failure of a primary 
network path. Thus, the control and data acquisition system 
200 is particularly suited for mission-critical applications 
such as, for example, monitoring the status of an electrical 
power grid. 

[0035] FIG. 3 is a flowchart of a preferred control routine 
for network controllers 110, 210a and 2106. The routine 
starts at step 300, where primary network paths between the 
network controller and the network devices are determined. 
Next, at step 310, backup network paths are determined, 
stored in the network controllers and blocked. 

[0036] The routine then proceeds to step 350, where the 
backup network paths are maintained by checking them 
periodically for failures. Next, at step 370, the control 
routine determines if the primary network paths are opera- 
tional. If all primary network paths are operational, control 
continues to step 380. Otherwise, control jumps to step 390. 

[0037] At step 380, the control routine continues to block 
the backup network paths to prevent loops. Control then 
returns to step 350. 

[0038] At step 390, the control routine blocks the failed 
primary network path and activates one of the backup 
network paths. Control then continues to step 400, where the 
control routine determines if the failed primary network path 
has been restored. If the failed primary network path has 
been restored, control continues to step 410. Otherwise, 
control returns to step 390. 

[0039] At step 410, the control routine blocks the backup 
network path that was activated at step 390 and re-activates 
the restored primary network path. Control then returns to 
step 350. 

[0040] FIG. 4 is a flowchart of a preferred control routine 
for testing the backup network paths, which is preferably 
periodically performed as part of the "maintain backup 
network paths" step 350 of FIG. 3. 

[0041] The routine starts at step 351, where the network 
controller determines if a command to start testing as been 
received. If it has, control continues to step 352. Otherwise, 
the network controller continues to wait for a command to 
start the testing. 

[0042] At step 352, the network controller stops commu- 
nicating with network devices connected to the backup 
network path being tested. Next, at step 354, the control 
routine disables the ports of one of the bridging devices on 
the corresponding primary network path. This forces the 
network devices connected to the backup network path 
being tested to switch to their backup data ports. 

[0043] The routine then continues to step 356, where the 
backup network path being tested is activated. Then, at step 
358, the network controller requests data from the network 
devices via the backup network path. 

[0044] At step 360, the control routine determines whether 
the backup network path is working. If the backup network 
path is working, control continues to step 362, where the 
backup network path is de-activated and the ports of the 
bridging device disabled at step 354 are re-enabled, thereby 
causing the network devices to switch back to the primary 
data port. Otherwise, control skips to step 364, where a 
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failure notification is provided to a network administrator or 
anyone else responsible for the network. 

[0045] At step 366, the network controller determines if it 
is time to test another backup network path. The network 
controller preferably waits a predetermined period of time 
before testing another backup network path. Alternatively, 
the network controller could be configured to wait for a 
manually entered command from a user before testing the 
next backup network path. Once the predetermined period of 
time has elapsed, or the manually entered command has 
been received, control returns to step 352. 

[0046] The network segments between the bridging 
devices (120a, 1206, and 220a-220/i) and the network 
devices (130a-130c and 230a-230/) that form the primary 
and backup network paths can be implemented with twisted- 
pair cables, fiber optic cables, coaxial cables, wireless con- 
nections or any other type of connection. The network 
protocol used for the network 100 and the control and data 
acquisition system 200 is preferably an Ethernet protocol. 
However, any network protocol can be used, while still 
falling within the scope of the present invention. 

[0047] The network controllers 110, 210a and 210b of the 
present invention are preferably implemented on a server, 
which may be or include, for instance, a work station 
running the Microsoft Windows™ NT™, Windows™ 2000, 
UNIX, UNUX, XENIX, IBM, AIX, Hewlett-Packard 
UX™, Novel™, Sun Micro Systems Solaris™, OS/2™, 
BeOS™, Mach, Apache Open Step™, or other operating 
system or platform. However, the network controllers 110, 
210a and 210b of the present invention could also be 
implemented on a programmed general purpose computer, a 
special purpose computer, a programmed microprocessor or 
microcontroller and peripheral integrated circuit elements, 
an ASIC or other integrated circuit, a hardwired electronic or 
logic circuit such as a discrete element circuit, a program- 
mable logic device such as a FPGA, PLD, PLA, or PAL, or 
the like. In general, any device on which a finite state 
machine capable of implementing the control routines illus- 
trated in FIGS. 3 and 4 can be used to implement the present 
invention. 

[0048] While the foregoing description includes many 
details and specificities, it is to be understood that these have 
been included for purposes of explanation only, and are not 
to be interpreted as limitations of the present invention. 
Many modifications to the embodiments described above 
can be made without departing from the spirit and scope of 
the invention, as is intended to be encompassed by the 
following claims and their legal equivalents. 

What is claimed is: 

1. A network, comprising: 

a primary network controller; and 

a plurality of network devices, wherein each network 
device is connected to the primary network controller 
by a respective primary network path; and 

at least one predetermined primary backup network path 
connecting each network device with the primary net- 
work controller, wherein each predetermined primary 
backup network path is blocked by the network con- 
troller when a corresponding primary network path is 
active; 



wherein, when a primary network path between a network 
device and the primary network controller fails, the 
primary network controller blocks the failed primary 
network path and switches to one of the predetermined 
primary backup network paths. 

2. The network of claim 1, wherein the primary network 
controller periodically tests a condition of the predetermined 
backup network paths. 

3. The network of claim 1, further comprising: 

a secondary network controller that takes over control of 
the network if the primary network controller fails, 
wherein each network device is connected to the sec- 
ondary network controller by a respective secondary 
network path; 

at least one predetermined secondary backup network 
path connecting each network device with the second- 
ary network controller, wherein each predetermined 
secondary backup network path is blocked by the 
network controller when a corresponding secondary 
network path is active; 

wherein, when a secondary network path between a 
network device and the secondary network controller 
fails, the secondary network controller blocks the inop- 
erable secondary network path and switches to one of 
the predetermined secondary backup network paths. 

4. The network of claim 3, wherein the secondary network 
controller periodically tests a condition of the predetermined 
secondary backup network paths. 

5. The network of claim 1, wherein at least a portion of the 
respective primary network paths and at least a portion of the 
predetermined primary backup network paths each comprise 
a 10 megabit per second connection. 

6. The network of claim 5, wherein the 10 megabit per 
second connection comprises an Ethernet lOBase-T connec- 
tion. 

7. The network of claim 5, wherein the 10 megabit per 
second connection comprises twisted-pair cable, fiber optic 
cable and/or coaxial cable. 

8. The network of claim 5, wherein the 10 megabit per 
second connection comprises a wireless connection. 

9. The network of claim 1, wherein at least a portion of the 
respective primary network paths and at least a portion of the 
predetermined primary backup network paths each comprise 
a 100 megabit per second connection. 

10. The network of claim 9, wherein the 100 megabit per 
second connection comprises an Ethernet 100Base-T con- 
nection. 

11. The network of claim 9, wherein the 100 megabit per 
second connection comprises twisted-pair cable, fiber optic 
cable and/or coaxial cable. 

12. The network of claim 9, wherein the 100 megabit per 
second connection comprises a wireless connection. 

13. The network of claim 1, wherein the primary network 
controller comprises a computer. 

14. The network of claim 1, wherein the respective 
primary network paths and the predetermined primary 
backup network paths each comprise a plurality of network 
bridges. 

15. The network of claim 14, wherein the plurality of 
network bridges comprise a plurality of Ethernet switches. 

16. The network of claim 1, wherein at least some of the 
network devices comprise universal relays. 
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17. The network of claim 1, wherein at least some of the 
network devices comprise process controllers. 

18. A control and data acquisition system comprising the 
network of claim 1. 

19. The control and data acquisition system of claim 18, 
wherein the primary network controller monitors a status of 
an electrical power grid through the network. 

20. A control and data acquisition system, comprising: 

at least one network controller; 
a plurality of universal relays; 

a plurality of process controllers, wherein each universal 
relay and each process controller is connected with the 
at least one network controller by a respective primary 
network path; and 

predetermined backup network paths connecting each 
universal relay and each process controller with the at 
least one network controller, wherein each predeter- 
mined backup network path is blocked by the at least 
one network controller when a corresponding primary 
network path is active; 

wherein, when a primary network path fails, the at least 
one network controller blocks the failed primary net- 
work path and switches to one of the predetermined 
backup network paths. 

21. The system of claim 20, wherein the at least one 
network controller periodically tests a condition of the 
predetermined backup network paths. 

22. The system of claim 20, wherein at least a portion of 
the respective primary network paths and at least a portion 
of the predetermined backup network paths each comprise a 
10 megabit per second connection. 

23. The system of claim 22, wherein the 10 megabit per 
second connection comprises an Ethernet lOBase-T connec- 
tion. 

24. The system of claim 22, wherein the 10 megabit per 
second connection comprises twisted-pair cable, fiber optic 
cable and/or coaxial cable. 

25. The system of claim 22, wherein the 10 megabit per 
second connection comprises a wireless connection. 

26. The system of claim 20, wherein at least a portion of 
the respective primary network paths and at least a portion 
of the predetermined backup network paths each comprise a 
100 megabit per second connection. 

27. The system of claim 26, wherein the 100 megabit per 
second connection comprises an Ethernet 100Base-T con- 
nection. 

28. The system of claim 26, wherein the 100 megabit per 
second connection comprises twisted-pair cable, fiber optic 
cable and/or coaxial cable. 

29. The system of claim 26, wherein the 100 megabit per 
second connection comprises a wireless connection. 

30. The system of claim 20, wherein the at least one 
network controller comprises at least one computer. 

31. The system of claim 20, wherein the respective 
primary network paths and the predetermined backup net- 
work paths each comprise a plurality of network bridges. 

32. The system of claim 31, wherein the plurality of 
network bridges comprise a plurality of Ethernet switches. 



33. A method of implementing a network, comprising the 
steps of: 

determining a primary network path between a network 
controller and a network device, wherein the network 
controller and the network device exchange data over 
the primary network path; 

determining, prior to a failure of the primary network 
path, a backup network path between the network 
controller and the network device; 

monitoring a status of the primary network path; 

blocking the backup network path while the primary 
network path is active; and 

blocking the primary network path and making the 
backup network path active when the primary network 
path fails. 

34. The method of claim 33, further comprising the step 
of periodically monitoring a condition of the backup net- 
work path. 

35. The method of claim 33, wherein the network device 
comprises a universal relay. 

36. The method of claim 33, wherein the network device 
comprises a process controller. 

37. The method of claim 33, wherein the primary network 
path and the backup network path comprise network 
bridges. 

38. A computer programmed with a network monitoring 
program, wherein the network monitoring program, when 
executed by the computer, performs the steps of: 

determining a primary network path between a network 
controller and a network device, wherein the network 
controller and the network device exchange data over 
the primary network path; 

determining, prior to a failure of the primary network 
path, a backup network path between the network 
controller and the network device; 

monitoring a status of the primary network path; 

blocking the backup network path while the primary 
network path is active; and 

blocking the primary network path and making the 
backup network path active when the primary network 
path fails. 

39. The computer of claim 38, wherein the network 
monitoring program performs the further step of periodically 
monitoring a condition of the backup network path. 

40. The computer of claim 38, wherein the network device 
comprises a universal relay. 

41. The computer of claim 38, wherein the network device 
comprises a process controller. 

42. The computer of claim 38, wherein the primary 
network path and the backup network path comprise net- 
work bridges. 

43. The computer of claim 49, wherein the network 
bridges comprise Ethernet switches. 

***** 



